$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3231312e3136312e36322e302f32342d3234203d3e203137363233.roa File: 3231312e3136312e36322e302f32342d3234203d3e203137363233.roa (raw, json) Hash identifier: 8+1wmhdqFHSSgAxeNgNasOOrNmyQ9scppcZdwHg6hHM= Subject key identifier: 33:CB:FA:4E:F3:82:20:4B:96:CF:2D:2F:7E:9B:B0:B5:E0:AA:7B:06 Certificate issuer: /CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5 Certificate serial: 497EF736EE697E1B25DAEE77BA94454A313A14C6 Authority key identifier: 32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3231312e3136312e36322e302f32342d3234203d3e203137363233.roa Signing time: Fri 10 Apr 2026 03:00:38 +0000 ROA not before: Fri 10 Apr 2026 02:55:38 +0000 ROA not after: Fri 09 Apr 2027 03:00:38 +0000 asID: 17623 IP address blocks: 211.161.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 08:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:7e:f7:36:ee:69:7e:1b:25:da:ee:77:ba:94:45:4a:31:3a:14:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5 Validity Not Before: Apr 10 02:55:38 2026 GMT Not After : Apr 9 03:00:38 2027 GMT Subject: CN=33CBFA4EF382204B96CF2D2F7E9BB0B5E0AA7B06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:83:20:8f:b3:dd:82:8f:b5:98:44:0e:e7:d6: fb:45:3e:39:6a:43:8e:aa:a3:eb:74:22:63:b9:38: 6d:10:33:0f:ad:2c:d8:8a:08:b6:92:7b:55:b3:03: 2a:e6:95:b3:7a:bf:2f:63:39:8a:6b:95:55:16:9f: 2d:8f:b1:9a:81:78:8f:bd:94:27:9b:d8:c0:e0:92: 73:be:a8:8c:54:86:53:6d:1f:11:32:3d:47:92:37: aa:3d:d9:77:7e:cd:ab:f2:e6:cc:c1:a2:24:18:36: dd:b5:a3:b0:38:e2:a9:3e:52:fa:6d:09:0f:38:25: 3f:b9:bd:e0:74:b3:d4:19:54:b7:fc:e0:0e:4a:d7: 3c:1b:5c:59:de:f5:a2:6b:30:47:76:d0:0f:e1:d6: ed:c0:29:be:74:22:b4:25:4d:d2:da:17:71:f5:9c: 13:1f:b0:b0:e7:1f:27:53:84:88:75:eb:87:f3:d8: 9d:ff:53:40:0e:6d:93:6d:43:e5:9a:89:77:f3:eb: d7:3a:0c:7c:ce:6e:95:c2:b9:c0:0e:21:d3:23:04: bc:06:51:a7:cb:45:7d:30:f7:f5:78:f5:59:64:7e: fe:c5:48:19:90:f8:9f:28:c6:f0:0a:d7:d2:02:2a: 39:bc:c5:d5:77:89:ac:eb:27:11:80:91:0a:3a:61: 3b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:CB:FA:4E:F3:82:20:4B:96:CF:2D:2F:7E:9B:B0:B5:E0:AA:7B:06 X509v3 Authority Key Identifier: keyid:32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3231312e3136312e36322e302f32342d3234203d3e203137363233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.161.62.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:6b:9e:83:72:4c:bc:1b:d8:f3:72:ec:ed:bd:46:fd:34:0d: db:57:d9:bb:f5:91:ce:75:26:60:fd:ea:84:35:78:4f:04:42: bd:9d:a5:e1:9c:17:f7:cd:0d:c3:d9:f7:97:1d:61:36:55:c3: 15:aa:eb:03:3d:75:77:3b:c9:bc:6f:26:06:8f:38:aa:7e:d8: 01:68:49:c3:64:8d:0b:59:a3:61:ec:43:f0:b9:df:96:8c:aa: 61:c2:1f:05:2c:10:81:3e:cc:b1:bc:19:0e:0f:c8:70:83:88: 0e:e9:e1:2f:74:99:40:7b:b8:be:59:d1:ab:1a:dd:00:f3:f3: 1f:f6:56:55:ae:19:0b:06:90:49:18:75:c0:c7:be:3d:f9:70: 5e:1d:1b:de:1a:01:fe:1e:f5:4a:95:71:60:f6:df:dc:6e:ac: 52:c8:b7:d3:cb:b1:53:5e:e6:c1:46:8f:1c:d0:d5:01:7f:62: e9:18:22:f4:24:6e:31:a3:6d:c1:82:da:52:7a:56:d9:32:d2: a1:e5:94:7c:98:d9:5f:54:dd:db:c4:cc:f1:a0:60:5b:f1:26: 2e:2f:1a:dd:bf:75:b9:e8:b7:99:37:68:68:58:69:f8:70:ba: 8e:92:b3:6c:2d:a3:04:d1:e5:6a:e4:9c:a1:38:51:52:e6:80: f6:be:81:21 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUSX73Nu5pfhsl2u53upRFSjE6FMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJDNkJFREJDQTJGNTM0RDQxMzIyMDA2RTM5QTZFNTFC MUE5QTlENTAeFw0yNjA0MTAwMjU1MzhaFw0yNzA0MDkwMzAwMzhaMDMxMTAvBgNV BAMTKDMzQ0JGQTRFRjM4MjIwNEI5NkNGMkQyRjdFOUJCMEI1RTBBQTdCMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChgyCPs92Cj7WYRA7n1vtFPjlq Q46qo+t0ImO5OG0QMw+tLNiKCLaSe1WzAyrmlbN6vy9jOYprlVUWny2PsZqBeI+9 lCeb2MDgknO+qIxUhlNtHxEyPUeSN6o92Xd+zavy5szBoiQYNt21o7A44qk+Uvpt CQ84JT+5veB0s9QZVLf84A5K1zwbXFne9aJrMEd20A/h1u3AKb50IrQlTdLaF3H1 nBMfsLDnHydThIh164fz2J3/U0AObZNtQ+WaiXfz69c6DHzObpXCucAOIdMjBLwG UafLRX0w9/V49Vlkfv7FSBmQ+J8oxvAK19ICKjm8xdV3iazrJxGAkQo6YTtfAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUM8v6TvOCIEuWzy0vfpuwteCqewYwHwYDVR0j BBgwFoAUMsa+28ovU01BMiAG45puUbGpqdUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgxNTk2OTMyNDMwMjMzNy8wLzMyQzZCRURCQ0EyRjUzNEQ0MTMyMjAwNkUzOUE2 RTUxQjFBOUE5RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzJDNkJFREJDQTJGNTM0RDQxMzIyMDA2RTM5QTZFNTFCMUE5QTlENS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NDgxNTk2OTMyNDMwMjMzNy8wLzMyMzEzMTJlMzEz NjMxMmUzNjMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzM2MzIzMy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEANOhPjANBgkqhkiG9w0BAQsFAAOCAQEAOmueg3JMvBvY83Ls7b1G/TQN 21fZu/WRznUmYP3qhDV4TwRCvZ2l4ZwX980Nw9n3lx1hNlXDFarrAz11dzvJvG8m Bo84qn7YAWhJw2SNC1mjYexD8LnfloyqYcIfBSwQgT7MsbwZDg/IcIOIDunhL3SZ QHu4vlnRqxrdAPPzH/ZWVa4ZCwaQSRh1wMe+PflwXh0b3hoB/h71SpVxYPbf3G6s Usi308uxU17mwUaPHNDVAX9i6Rgi9CRuMaNtwYLaUnpW2TLSoeWUfJjZX1Td28TM 8aBgW/EmLi8a3b91uei3mTdoaFhp+HC6jpKzbC2jBNHlauScoThRUuaA9r6BIQ== -----END CERTIFICATE-----Generated at Mon Apr 13 13:53:23 2026 by rpki-client